Threats tagged 'ghsa-crpx-jj3g-c9f4'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.3	CVE-2026-126768OpsTree REMS through 1.0.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to Critical9.32026-11-11GCVE DatabaseCVE-2026-126768 OpsTree REMS versions through 1.0.0 have an authentication bypass vulnerability. This flaw allows unauthenticated attackers to obtain valid JSON Web Tokens (JWTs) by manipulating the client-controlled is_local_auth field. By sending a specially crafted POST request to /api/v1/user/login/ with the admin username, an invalid password, and is_local_auth set to true, attackers can gain SuperUser administrative access. Report on CVE-2026-126768 Vulnerability CWE-287 #ghsa-crpx-jj3g-c9f4	GCVE Database	2026-11-11

Page 1 of 1